Mark getPrimeP and getPrimeQ with RestrictedApi (AccessesPartialKey).

These are error prone and users should read the linked page before using it.

PiperOrigin-RevId: 525111715
Change-Id: I5e00bf0b393a22a22c9a75b4088867c71989ab44

src/main/java/com/google/crypto/tink/signature/RsaSsaPkcs1PrivateKey.java

@@ -216,11 +216,21 @@ public RsaSsaPkcs1PublicKey getPublicKey() {
   }
 
   /** Returns the prime factor p. */
+  @RestrictedApi(
+      explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey",
+      link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys",
+      allowedOnPath = ".*Test\\.java",
+      allowlistAnnotations = {AccessesPartialKey.class})
   public SecretBigInteger getPrimeP() {
     return p;
   }
 
   /** Returns the prime factor q. */
+  @RestrictedApi(
+      explanation = "Accessing parts of keys can produce unexpected incompatibilities, annotate the function with @AccessesPartialKey",
+      link = "https://developers.google.com/tink/design/access_control#accessing_partial_keys",
+      allowedOnPath = ".*Test\\.java",
+      allowlistAnnotations = {AccessesPartialKey.class})
   public SecretBigInteger getPrimeQ() {
     return q;
   }